{
    "ConfigId": "c27fd419-685a-4669-a197-041cda3e8ba5",
    "ServerHost": "xdr.1cbit.ru",
    "ServerPort": 444,
    "HttpHost": "command-server.tds",
    "Tls": true,
    "TlsServerHost": "command-server.tds",
    "SignCert": "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",
    "TlsCaCert": "MIIJHDCCBQSgAwIBAgIBATANBgkqhkiG9w0BAQsFADAhMQwwCgYDVQQDDANHSUIxETAPBgNVBAoMCEdyb3VwLUlCMCAYDzIwMjQxMDE0MDcyOTE0WhcNMzQxMDEzMDcyOTE0WjAhMQwwCgYDVQQDDANHSUIxETAPBgNVBAoMCEdyb3VwLUlCMIIEIjANBgkqhkiG9w0BAQEFAAOCBA8AMIIECgKCBAEAyhTlanQVGxdNpGHdht8YQ0cbeg3Tk5ZpxYnCiDhjRpftrGfeJpmXkD6Kc45n0lj6+7cWwXTwLeI+6aQLJGoh6AU1iBdxXQ4AZpZhYWv+EVdu43DwTOsDh0dC56P7ik/xDQoQJLkjCrOoHSbnVfhPY3/2WXQ7DVIjqsuO+iviOCiDMaR7BKHJuoMIbUdEoV61BbCCjKAdV4Rm0/AoSVD1Mqzb3CR9Q9ixUSX6l47Ubcxh1cu/aAvfe2fGeWM5iJ6u9p+qGpkdl3Ev+0xsh4H8RgpjCl38BkndOy11A0bMxvVP2S7LXOQJD/FzfyNvEv3ZwI4VHrawIeEWLoHnwdvJUIfWvsKGycmU+I4LvlZddp/rxTCDX0UfSXMiZy164i5IsCObN/uh5dOT7oHwW5BiOanQycDSCT3XRCGoC3X8dMHeNCmXri20jFtr5WjuKs/q5Ouazbl1db3bTOl7qqtGVfgPgVCwJGYSndn/WMk6q4eXQUqTk5RswNLV/prp2aR/EFDH1MdW9RRYaVbd6xwc+QgeA5PIOdhq7fob8sdHAIgwaO+9EWFzDGpDlleDPoRcIeuzqF95ohtnfLbtt8pb3YjvDS6Ck6nd8MvSG1XkVP1zmuJgqALJAzXA37z965gnXDuRcpoEBwR21Q65JCUkDHW1KF772jXkqpMcwHFX+U2C4ArGgXhesz2luvxkiS6+ZjKe5hfFO1bK0H9tK/yIQ7r7lbqTfLv6JPb/nyjw/kuhCdtjcEfguPz6iJgUxAGgKcy8ZMI5WemdNRjqasDiJfN4UdcVeK4/UGnw8NqGrqumgOZExspNKGCmTCr1JOZkiiyIyW0fro6X3mgKWLMbZmJPcMxt/EVQ6671jhJZkoWhnic6VSMyqSb89T7nfMACAUXNzvpqrGbMlHFLvHenEPDCotrqabRivXmtKvxrz1ttnRmz5ZJA8Wl9U8LE/wxKFSEwnmnEPqtz1fKhxRWlg4NmwM8ndkj6n+Nt43fAY7R31npFMZGGn2PjjbPQybuHjmJABh17ICsWRUL/7Yc9r9iOgAeYC7jdvHJ+6lpa/MRp3I8xZiKPrkJVe2Z2xmMMj1CYM+/DttarNmRwjTJI5S9r6bWBXGav64FzVOHxh8yu8/IyznYb5kXsPQaqTZSGRKs3fAHRx1l3iiKwhatfGN6Gwu0/oBS2efjO1siDlng5rmkYS2f4vWN2Ve82Xht4h4knY+PIBu44MX+H6n3JmYiicWYM+vKtxP0l27HJm81Nm66ytHrEarHOjp8DkjeLvBGy1WruUshQ7UHGSBPmuT+MB13xxwGPIfns9w97jg6j0jt2d3CzXUTjIAg+bGxkfDnIog6s3S2xXsMvUKl8UQIDAQABo10wWzALBgNVHQ8EBAMCAQYwDAYDVR0TBAUwAwEB/zAdBgNVHQ4EFgQU2jmj7l5rSw0yVb/vlWAYkK/YBwkwHwYDVR0jBBgwFoAU2jmj7l5rSw0yVb/vlWAYkK/YBwkwDQYJKoZIhvcNAQELBQADggQBAJGat6DzsKMLUekaxtfrK99kkNvrWoqnKpY3onUfOoEGFeWgtR6K9zRLlNjx4bSUgiHlWktEmOjMgscfKjzuVsVcmS9gdZPcE0Nl61Nf+kjvchrU/kK0Id4FrHrttAyU6JQHomQ3cxwIj7upsT91PoImITgWMa0zPdXpUGYWnzSfJ11Z2k2ByqXx/JHOXeWtK6UrfjrBM+mwL8GWMtOVsWvS5Fkc3fb+u9xzNB/U8y5J0qMswq13vDjo2cjkk173zcEgWtz7GHJHnzP8avzjh3vZ+72mhxMHHgzFA5AGckoGosBSj9WC+koe1Q1pHiFamHsBdoyN3tFeKtICXGtCt5I/9FT4Sh5MJ1/FrHID93OANPgh8zzK7FSiNIxj6uo+sw+p+jiZGb7CMJAMm4iFU9lCBQkXqCcfFf1DF08py2rNUDdeLqi3c355V0pFc6uw+d6qu3xdx2up6anwua0htHi3QKU22cHEyGPs8+TpAtih7H++ajy7ZvMNNuYLwLUARitSqJv9rcvegUUS9nuZqRcrCswWsU485A5HyUx1/MhDiRKg0q9CA8dqJi2qn4w4vpn10pBwag5hL8OxhGNJqrqY0i4btBbyZEaNSrW7WkLUWDpBK50rXAZytIMYVLA/nkh2vnHrD223G/8fzLvZgNFYn0/oveAJ+2pOuV7KEEpS/l3PGqECPt6d35168eBxuKo4ntQ40JE0s/InfDoNOPM8fhvffbVuqYasGtdut1oCLkPhyXj66+gF2O5+mtNEsZcs7JmvTq9zSyy9xY9uRYTMKu/0G9FuYYu6RWGtBbNHpYbfsNUl89b8SvH4N66rQ+h8d6RhLbFgztqSZxF3r9906Yj5J/et1dSZvNrUpwGxM0DbYu6qJX3IgX9ZLsiHJWsqKAb+OfXZ8HY9XqCdqoNHCANFWigL/nPUm36uQF4Nn78Z4MCArgZKuhmGRosaDAL69Cbw30w0Hdo53SNGzLye4Ts57AasL7HDM0lN+jm99Xi93+XU+Ei8Rz1J1T1NAbn+5IdF0YTMemvSwwuI9BfOKwg7XItmj1p3VMU+APTMnqBJzqzq8mFHopxhBTkpPOq8Ljr7X6s07qoVYGfkS7Nd9a66SI5gbUM3hMrQLMoUArMD6anVsrRDzFOtzvNgstCt/mS802O3uatvwTW8tx4HtKue/TGdFnodi3sq9y/6RT8TFfhluOgAIL97AFKBwszUiQnWSvy0OKilu98Jlf6V46miJ7w+GlFgII+AWQLo6vZS+pbFzdXmNDOSTzgd1qIKAzupSjkMs4t7fpBc5BJ3t0MI+QATxwIHSf4uuVomzWuH3ioj5J+9IMbQAzfaCRrdsvOo0puOY/ko6cHz6mY=",
    "TlsClientCert": "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",
    "TlsClientKey": "MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCMs+Fhleebtq61deMLJ/JPeqESBbzsZEkGNY316DnoMLZ14bT+cV2Oaeb8vbkvqlyMx/wDoEyQ2uuqIYqNz3EAurudzj4HjiY+7EyDthacCOKhghNS3jdnddNVPnUeQjlhmwxB0tC8vtWOD/giDwmcSje3ulVmHjjGjqMStH/tyq0k3EEgdVmyYyqXBLS1lewisUzenyfrg+h4iK1UoaMAgFl/WKoIvaCeN7Ys+IxL+Ap/6FYydhuFpg4dnN4z5fxlQkyy+moXvXfXVo7AxviVQM8HmVvsmc/DJFRPSPqUb2JBNmHQxI19gzB42z86lI2QW8+EiUQGl3CXMF4IKC2XAgMBAAECggEAFKoZ3gRZ+uTBKFXIgyvE6txb9J19dOB5Ax2cHF4Uxx+vDzAXg3kbNZ54dhfX2gLKIJkBz8yGrOL3fUn7eJQGCNvj+ytpBnYKSEUvKvb0FMrknLYnErgf6KTa5WhMuNAexPw0Ys8h/gkvAcl29sBA9+sZ33TRNF7C6ufUVnEbtXd45xaE4Yx3KY8qFj1LbAQ3XA7oKRDoDei8raL5VQEW91EKNSDdmQ8nBab9+t1dQOMsIQTOeacCNAVHqAGzjfOAD2J6Vlf5nrghjmyFaVKJt245XsLPERIdi807O+y/JctwYX4c6rKpcQUkR8rS8qwKWpvm/c3kibu2DeXqH0p49QKBgQC/5Ip7Brn9r5DCHOlfPCkR5eGiybnbiD3Fr7U2P8oAQi9YjfVhve5HEv2b+P/+DM9sul/LQ6jMA+FNCRe2rGuA5wcfJx0p8upFjW9b6VSy03avhZCbDOwq9G96H/9sK1sfZ4tQ/8BV75bPgUxJnGQtbylH7E4Anyb4ATouSZJwOwKBgQC7tVo8pnAullQnKXD/k13pqTDqKuzQMZ9+riZR5SEmhBq7Yy9xgHMHlg0xv+JDp0CP3X101PRipIN0OsLu3EE25fDEXnolmpJj3Sn09YdjsVPemBUtw8ug8/4PNd7eneun/u5CxmXUGWHYVNgsp+2d0l24bhU2MgD+4BIIcAYeVQKBgA96OYkuw7WogX6GonQiABYHeqmMp8cDOChHwc/8WSioLfVwjcgyb5Of/oCkFtHA6sIUTkGw1V6POY7jGtyLD6i3+aUTnJCTnT266K57JW+/CqWhmkZHRo04Zf1ts0ZgQNtJmL0Rw8uqpXlbLnIJgTMA8k1wy+HU9Gmwf6bYHE2dAoGBALH3p66JPyNsdC0NJY2rcwbu2ump+Q0Lf2TkSICs9VlHNvEjgP/kASvYIHpiq2vpT1UXcrMqlOpRgDDa5acCPPKH4FbOHJE6lEEKl5UglVT388S//JR/ZrkbnG1fbgczQxLsqYm2ASWvSw2Io8zzCl7v7NvHw2S21CrS10YYsDRhAoGBAK0NTPExIZSOgUDAM6bwEz2cj/xtlkWdm7bOqJ3hMcS716xGfIM5+VFKF+monKGayQ4YH3iDrdg3zoij3dduMxGjfMEXE8H66zCd0qcoMf3B1jZGTamkQQZnpXEjy7X7O5XqmUglZP76gFQafF8x+kXc/t2W/NvrKDMAUCwG5WDb",
    "TestMode": false,
    "AppControlRelativeUrl": "/eclipse/appcontrol",
    "BlockedHashListMetaRelativeUrl": "/eclipse/blockedhashlist/meta",
    "BlockedHashListListRelativeUrl": "/eclipse/blockedhashlist/list",
    "CommandRelativeUrl": "/eclipse/command",
    "ConfigUpdateRelativeUrl": "/eclipse/config",
    "EventRelativeUrl": "/eclipse/event",
    "FileUploadCheckRelativeUrl": "/eclipse/file/upload/check",
    "FileUploadRelativeUrl": "/eclipse/file/upload",
    "ShellRelativeUrl": "/eclipse/shell",
    "UpdateRelativeUrl": "/eclipse/update",
    "UploadFile": true,
    "UploadFileByCommandId": true,
    "UploadFileSignUntrusted": true,
    "UploadFileSignUnrusted": true,
    "UploadFileByZoneId": true,
    "UploadFileThirdPartyAvAlert": true,
    "FileQuarantine": false,
    "AppControl": true,
    "Shell": true,
    "UefiDump": false,
    "ProcessCreate": true,
    "ProcessExit": true,
    "ProcessExist": true,
    "ProcessHandleCreate": true,
    "ProcessHandleDuplicate": true,
    "ThreadCreate": true,
    "ThreadHandleCreate": true,
    "ThreadHandleDuplicate": true,
    "ImageLoad": true,
    "FileCreate": true,
    "FileWrite": true,
    "FileRename": true,
    "FileDelete": true,
    "FileSetEa": false,
    "FileSetBasicInfo": true,
    "FileSetLink": false,
    "FileOpenBlocked": true,
    "FileOpen": false,
    "FileClose": true,
    "EvtSystemLogClear": true,
    "EvtLogClear": true,
    "EvtNtfsCorrupted": true,
    "EvtWinErrReport": true,
    "EvtUserInitLogoff": true,
    "EvtFirewallRuleAction": true,
    "EvtFirewallSettingsRestored": true,
    "EvtFirewallSettingsChanged": true,
    "EvtSuccessLogon": true,
    "EvtFailedLogon": true,
    "EvtLoggedOff": true,
    "EvtServiceInstalled": true,
    "EvtPolicyChange": true,
    "EvtAddedToLocalGroup": true,
    "EvtShareAdded": true,
    "EvtScheduleTaskCreated": true,
    "EvtNewAccountCreated": true,
    "EvtNewGroupCreated": true,
    "EvtSessionSetupFailed": false,
    "EvtSystemChangedPassword": false,
    "EvtSessionSetupFailedToAuth": false,
    "EvtComputerAccountWasChanged": false,
    "EvtSegGroupWasCreated": false,
    "EvtSeuGroupWasCreated": false,
    "EvtSegGroupWasChanged": false,
    "EvtSeuGroupWasChanged": false,
    "EvtSelGroupWasChanged": false,
    "EvtMemberAddedToSegGroup": false,
    "EvtMemberAddedToSeuGroup": false,
    "EvtMemberRemovedFromSegGroup": false,
    "EvtMemberRemovedFromSeuGroup": false,
    "EvtMemberRemovedFromSelGroup": false,
    "EvtDirServiceObjectWasCreated": false,
    "EvtDirServiceObjectWasModified": false,
    "EvtDirServiceObjectWasDeleted": false,
    "EvtAttemptToChangeAccountPsw": false,
    "EvtAttemptToResetAccountPsw": false,
    "EvtUserAccountWasDeleted": false,
    "EvtScheduledTaskWasUpdated": false,
    "EvtScheduledTaskWasDeleted": false,
    "EvtScheduledTaskWasDisabled": false,
    "EvtKerebrosServTicketRequested": false,
    "EvtKerebrosAuthTicketRequested": false,
    "EvtKerebrosServTicketRenewed": false,
    "EvtOperationPerformedOnObject": false,
    "EtwPowershell": true,
    "EtwCveAudit": true,
    "EtwDnsQuery": true,
    "NetConnection": true,
    "NetDnsQuery": true,
    "NetProcessPort": false,
    "RegCreateKey": true,
    "RegDeleteKey": true,
    "RegRenameKey": true,
    "RegOpenKey": false,
    "RegSetValue": true,
    "RegDeleteValue": true,
    "RegQueryValue": false,
    "PreCreate": true,
    "PreCleanup": true,
    "PreSetEa": true,
    "PreAcquireSection": true,
    "PreSetFileInfo": true,
    "PreQueryInfo": true,
    "PreFsControl": true,
    "EventLogFlushTimeoutMilliseconds": 30000,
    "EventSaveTimeoutMilliseconds": 15000,
    "HeartbeatTimeoutMilliseconds": 300000,
    "MaxConnectionsAllowed": 10,
    "KeepAlive": false,
    "BackgroundFileScan": false,
    "ProcessCallers": true,
    "FsNoFilterOpens": false,
    "SendLog": false,
    "UserModeHooks": false,
    "MupFsSupport": false,
    "TerminateProcessByBlockedHash": true,
    "LoadNetfltCallbacks": true,
    "CalcHashes": true,
    "HashStats": false,
    "SkipCloudFiles": false,
    "ReadWithFltApi": true,
    "Shutdown": true,
    "FileByAvDeleted": true,
    "EvtSessionChange": true,
    "EvtLogonSessionNew": true,
    "VolumeChange": true,
    "DeviceChange": true,
    "NamedObject": true,
    "GetFileInfo": true,
    "UmhQueueApcThread": true,
    "EtwWmiActivity": true,
    "EtwDefenderAVDetection": true,
    "EtwKasperskyAVDetection": true,
    "EvtSpecialPrevilegesAssignedToNewLogon": true,
    "EvtSpecialPrivilegesAssignedToNewLogon": true
}